Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/cc4f32fb07fa3b81e41be45375274e341ef0e15a.roa
File: cc4f32fb07fa3b81e41be45375274e341ef0e15a.roa (raw, json)
Hash identifier: ud/4ZFg9FXjvz/BfpV1cOHk1HvGHdTQHWI6EE1xX7S8=
Subject key identifier: D3:6A:EE:F9:71:C8:21:76:25:8C:DB:B1:A1:B5:1A:93:66:96:EB:AA
Certificate issuer: /CN=a7237d32fd35bbf0fdba7734a8368fd9626eca5a
Certificate serial: 2805C9
Authority key identifier: BE:02:D2:36:F8:B0:06:BA:87:81:2A:20:2E:F5:B7:66:DC:8E:30:3F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a7237d32fd35bbf0fdba7734a8368fd9626eca5a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/cc4f32fb07fa3b81e41be45375274e341ef0e15a.roa
Signing time: Mon 12 Feb 2024 15:10:18 +0000
ROA not before: Mon 12 Feb 2024 15:09:57 +0000
ROA not after: Mon 12 Feb 2029 15:09:57 +0000
asID: 262191
IP address blocks: 190.242.116.0/24 maxlen: 24
190.242.124.0/24 maxlen: 24
190.242.127.0/24 maxlen: 24
190.242.128.0/24 maxlen: 24
190.242.131.0/24 maxlen: 24
190.242.139.0/24 maxlen: 24
190.242.213.0/24 maxlen: 24
190.242.58.0/24 maxlen: 24
190.242.96.0/24 maxlen: 24
190.242.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2622921 (0x2805c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7237d32fd35bbf0fdba7734a8368fd9626eca5a
Validity
Not Before: Feb 12 15:09:57 2024 GMT
Not After : Feb 12 15:09:57 2029 GMT
Subject: CN=cc4f32fb07fa3b81e41be45375274e341ef0e15a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:15:5d:14:86:9e:db:b0:b8:26:0e:3b:d8:4d:
57:52:ae:fd:3e:fa:77:dc:80:21:dc:78:ab:62:7e:
d2:64:2f:8d:d9:6a:56:e2:5d:c3:d9:46:ec:0d:b6:
f7:aa:17:fd:fc:f5:8e:2a:bd:e3:18:1f:a1:93:7e:
ec:3c:c7:04:84:69:ec:65:ef:91:b8:44:23:47:7d:
cd:be:30:9f:76:2e:5a:5b:63:44:ba:db:fe:21:e9:
8f:55:0d:3a:1f:12:3e:c8:c6:58:45:a0:6a:6f:96:
a4:50:4e:18:fe:da:ab:a6:2e:6e:6f:5f:28:58:49:
02:6e:d8:2a:e9:d7:e6:d8:ea:7f:61:55:2d:14:63:
83:3b:be:9b:59:59:43:89:a6:3a:ab:18:67:98:9b:
48:c0:e7:a1:51:c5:51:95:2c:6b:d4:79:56:a4:4e:
6a:32:9d:cd:b5:f6:20:1f:f6:a5:e4:15:ac:5e:a5:
18:7a:7f:a3:74:2d:4a:02:44:21:fd:bd:89:76:58:
42:b4:98:01:4f:93:55:e6:59:c2:9a:2b:f8:c8:be:
8a:5c:c8:0d:fc:de:5c:eb:30:ae:90:c4:cc:6a:1c:
8c:5e:f9:03:4d:8e:5a:63:a4:1f:ed:cf:31:41:06:
c0:8c:55:86:42:fb:72:26:5c:cc:6d:25:2b:85:99:
54:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:6A:EE:F9:71:C8:21:76:25:8C:DB:B1:A1:B5:1A:93:66:96:EB:AA
X509v3 Authority Key Identifier:
keyid:BE:02:D2:36:F8:B0:06:BA:87:81:2A:20:2E:F5:B7:66:DC:8E:30:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a7237d32fd35bbf0fdba7734a8368fd9626eca5a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/cc4f32fb07fa3b81e41be45375274e341ef0e15a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/a7237d32fd35bbf0fdba7734a8368fd9626eca5a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.242.58.0/24
190.242.96.0/24
190.242.99.0/24
190.242.116.0/24
190.242.124.0/24
190.242.127.0-190.242.128.255
190.242.131.0/24
190.242.139.0/24
190.242.213.0/24
Signature Algorithm: sha256WithRSAEncryption
14:09:2d:9e:b0:dd:6e:5b:d8:1a:7e:e0:b9:0c:8b:da:8a:7a:
c6:d0:4b:cc:99:5b:79:a6:46:1d:75:6f:d8:30:3d:69:45:9f:
11:58:34:f8:e9:a5:59:d8:93:b0:9d:90:d6:a4:fc:11:76:8c:
c4:2f:48:87:2f:cd:60:5e:63:6a:f2:7b:6d:14:61:75:d2:35:
5f:4e:2c:29:4e:37:d0:83:94:ee:35:51:b1:01:e6:e8:14:d1:
08:5b:73:7d:91:ef:53:9e:0c:2e:40:59:da:7e:3e:07:76:d6:
aa:bf:82:26:2b:79:4a:3c:5c:ef:61:d8:30:7b:20:35:6a:a2:
87:b8:c3:01:10:1b:f0:ce:7c:3b:68:5b:74:da:bf:7c:95:92:
ad:7a:cf:97:04:83:f2:9a:a4:bb:d4:d8:c6:b4:0c:6e:66:fd:
8b:e6:c0:9c:7c:90:d7:84:56:99:76:ec:2c:54:b7:76:b8:4f:
33:a7:b4:ad:b0:cf:75:c6:b0:2a:e7:e8:6f:c7:7a:59:09:29:
75:82:63:5b:64:32:8f:df:9b:d9:ae:36:76:6b:58:f9:a8:00:
74:69:ce:b9:90:ed:1c:ca:db:e8:13:36:05:b0:33:7a:96:dd:
61:86:c3:02:82:ab:34:07:04:d7:65:1b:f6:aa:59:a7:10:6d:
43:cb:b6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:21 2024 by rpki-client on console-fra.rpki-client.org